Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Qtr6Iv77AaDA0A3k42BIHUGSp3Y.roa
File: Qtr6Iv77AaDA0A3k42BIHUGSp3Y.roa (raw, json)
Hash identifier: 6QEfpW2Xg/E1k0L84EpEtzpylhRvVFv7QQcoFdSsMf0=
Subject key identifier: 42:DA:FA:22:FE:FB:01:A0:C0:D0:0D:E4:E3:60:48:1D:41:92:A7:76
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 0193B6C2D61EAACD9ECB9E8E6760F874FAC1
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Qtr6Iv77AaDA0A3k42BIHUGSp3Y.roa
Signing time: Wed 11 Dec 2024 17:27:22 +0000
ROA not before: Wed 11 Dec 2024 17:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34380
IP address blocks: 193.43.244.0/22 maxlen: 22
193.43.244.0/24 maxlen: 24
193.43.245.0/24 maxlen: 24
193.43.246.0/24 maxlen: 24
193.43.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 09:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:c2:d6:1e:aa:cd:9e:cb:9e:8e:67:60:f8:74:fa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Dec 11 17:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42dafa22fefb01a0c0d00de4e360481d4192a776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e4:ad:ad:c3:c0:2e:73:6e:21:05:84:d3:8e:
e4:9c:66:60:19:81:4a:1b:00:a8:c1:38:57:92:55:
9c:57:0c:21:0c:f0:13:09:4e:ea:a4:0a:5c:23:43:
fc:29:64:8a:d2:1d:6e:c4:43:24:5c:01:2a:c4:10:
df:1a:bd:e3:bb:ce:76:1f:c8:09:f4:67:ec:5c:d6:
8f:81:2b:3f:3f:1d:b3:66:15:30:43:0a:3d:f4:12:
5c:9d:d3:31:af:6a:68:01:04:1f:bb:18:c4:24:5a:
ee:d8:04:69:48:60:c7:0a:1c:c5:e2:bf:ec:14:2d:
33:6f:24:cb:5f:1a:79:42:9f:ed:47:af:48:5a:ac:
a6:2c:81:9e:62:4d:cd:bb:8b:f4:b3:b3:b5:86:0e:
d0:cf:b4:c5:cb:f5:e1:cb:e0:68:80:21:b9:80:6f:
18:20:00:d3:eb:84:34:7c:92:48:e7:c0:ce:52:1d:
41:d3:44:80:4f:bb:7c:c8:56:db:69:d5:3b:eb:61:
cc:3b:0f:ab:66:f1:51:ea:f3:b4:19:0f:92:a8:61:
86:9c:a6:16:07:ab:a1:83:e6:3e:8a:80:f2:89:31:
d7:ec:f9:f7:59:2b:4d:8b:24:e9:9a:eb:df:45:51:
e0:0b:28:74:a3:cb:91:d8:2e:39:e3:ec:9c:a7:79:
1a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DA:FA:22:FE:FB:01:A0:C0:D0:0D:E4:E3:60:48:1D:41:92:A7:76
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Qtr6Iv77AaDA0A3k42BIHUGSp3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.244.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:9f:5b:b5:1c:89:72:45:e3:5e:88:ce:13:91:19:d3:33:a1:
43:4e:19:86:08:38:a7:fd:10:e1:e0:a8:82:6d:40:54:5d:3c:
5a:87:f5:50:59:4d:30:ac:b5:ad:42:89:73:90:c2:a0:1f:48:
ab:00:1a:93:5f:5e:66:05:9a:dd:6c:9a:0a:93:71:34:cb:93:
42:7f:42:54:32:57:67:51:03:85:c4:93:6a:70:46:87:b8:5e:
86:2f:0b:2d:f5:47:2f:ec:2c:3a:03:5e:28:e9:7a:38:d5:46:
e8:bc:f6:97:cf:45:72:e8:75:55:45:cb:ae:00:48:3d:3e:b3:
5a:18:de:55:87:e2:3d:a2:99:30:e2:9e:24:83:a7:b5:5d:f5:
94:76:b2:ff:e2:60:32:c0:c9:18:fc:6e:2a:dd:a5:57:47:e6:
67:cb:fb:3d:d0:91:f0:b2:c5:cf:9d:02:ce:00:b3:ea:c5:61:
d7:ce:c1:16:68:31:f8:f3:f8:76:4d:42:97:ca:11:9e:fc:97:
6f:7d:7d:89:b0:b0:db:87:41:97:13:fd:63:8d:09:9a:7f:b3:
62:eb:42:51:c2:e4:a6:d4:6f:f2:8c:2b:01:1a:bc:a9:21:b8:
20:21:2a:a1:03:85:63:b1:9c:6a:ed:40:47:bc:5c:55:d8:99:
6e:9f:4e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:10:24 2025 by rpki-client